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MEMORANDUM FOR THE MgfgggS CP USCIB ; 

Subject: Allied (NATO) Connunl cations Security. 

1. The enclosure contains the final report of the ad hoc 
cosadttee established by USCIB to examine the subject problem . 
This report is scheduled for consideration at a special meeting 
of the Board. 

2. Attention is invited to the fact that the "U.S. Person- 
nel Only” classification is required by a limited number of 
specific consents; which oan be excised or amended without undue 
difficulty in the event o f a decision to forward the report to 



3. Pursuant to agreement by members of the ad hoc conoittee 
the distribution of this report is limited to the number of copies 
indicated below. This distribution is based upon the requirement 
expressed to the Secretariat by individual USCIB members. For 
purposes of record a normal distribution of this covering memo- 
randum is being made: 
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U. S. PERSONNEL ONLY 



MEMORANDUM FOR THE CHAIRMAN, USCIB 



18 May 1953 



SUBJECT: Report of Ad Hoc Committee on Allied 

( NATO | Communications Security. 



1 . Transmitted herewith is the final Report of the 
Ad Hoc Committee established at the 82nd meeting of USCIB 
to examine the problem of Allied [NATO] communications 
security. 

2. The Report includes a raatlaat nrasHrma USCIB _ 

actions with reference to 

communications security matters . This review was prepared 
by the Chairman of the Security Committee, USCIB at the 
request of the Chairman of the Ad Hoc Committee and is 
presented as a convenience to the Board members in their 
consideration of the entire subject. 

3 . This Report has been approved unanimously by the 
members of the Ad Hoc Committee. 



T. Achilles rolyzoldes 
Chairman, Ad Hoc Committee 



One enclosure, with 
Tabs A through E , and 
Exhibits 1, 2 and 3 . 
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to the D.s. 

5. In other words compliance with the recommendation* will result in 
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to the fact that many 
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only because of bad procedures. 

As 



We remove the bad procedures and those 
we increase cryptographic knowledge, as we certainly will as we improve 
procedure, other systems basically insecure will be reexamined and removed 
from use. We will probably be asked to evaluate some of them and then will 
have to recommend against their use. 

6. This report therefore seems to argue against itself and we still 
haven f t the answer to the first question. 



If the 



answer is no the recommendations are valueless, and it would also be futile 
to go on with the BRUSA conference. 

7. If the answer is yes then the recommendations are valid. The report 
should be changed to make this perfectly clear, and the conference must by 
all means proceed in order to map out the details of implementation of the 
recosnend&tions . 




9. One more point in the report. It fails to mention that on the 
military side NATO countries have been provided NATO cryptosystems in some 
quantity, and that that is the reason why the military picture is relatively 
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StfBg&fc. There is, however, always the one NATO C CMS EC security regulation 
that ia apt to be broken and that is the use of NATO systems instead of 



10. It seems that ? there are two possible courses. 



a. Modify the report to reccassend against | 
and call off the UK conference, or 

b. Modify the report to admit the loss of | 
reccsaaendations stand, and let the conference proceed. 

I reccanend the latter course. 



to the U.S. 



[let 



the 



3 
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1. Three issues are involved in the forthcoming U. S. 



fereace on I 



a. Review of proposed tactics governing an approach 



to the 




2. Only item la will be considered in this paper. The general U. S. 
position on this item was established when the President approved the report 
of the U. S. - U. K. Conference on the Security of B; 

this approval, the U. S. was committed, subject to an improvement in the 



general security of the 




to an approach 



to the 



Ministry of Foreign Affairs (MFA) on the insecurity oil 
UBCIB observed to | [ that an approach to the 



nomnuni cations . 



1 should not be made 



until the Tripartite Security Report was approved by each oi the participating 



countries, and the 



had undertaken definite implementing action 



to carry out the recommendations of the report. 

3. The three governments have subsequently formally subscribed to the 
principles and standards of security proposed by the Tripartite Working Group, 
and the recommendations with respect thereto axe being progressively implemented. 
The 0. 8. and U. K. delegations to a recent conference of the Tripartite Vorking 
Group have agreed, in spite of reservations about Civil Ministries, that positive 



steps are being taken by the to put into effect these principles and 

standards. The U. S. must decide whether the "positive steps" already taken 
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by the are adequate; the State Department member may be in a position 

to certify the findings of the U. S. delegation to the Tripartite Working 
Group. 

4. The conditions postulated by USCIB regarding an approach to the UFA 
have been fulfilled to some degree. Additionally, the 



bryptanalytic 



organization recently expressed to the[ 
of the 



of NATO nations, particularly those ofl 



its concern over the insecurity 

and 



and during 1952 there was a marked improvement in the behavior of the 



on cipher security matters. 



6. Recommended actions : 



a. If the improvement oi 



general security is confirmed, 

USCIB agree that the conditions which deferred action on the j | communi- 

cations security problem have been removed. 

b. USCIB accept the method of approach to the MFA suggested by the 
U.K. in its letter of 10 December 1951 (Tab 8 in folder), and nominate a senior 
representative, together with a technical adviser, to meet wlth j | representa- 
tives in Paris at a specified date. 



c. State Department member brief the U. S. Ambassador to| 

proposed procedure of approach. 



hi the 



-BHftttE- 
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18 Hay 1953 



REPOR T <F AD HOC COMMITTEE ON EXAMINATION 
0? TBLBC0MMUWICAT10N3 OF NATO NATIONS 



PROBLEM: 



1» To examine the available telecommunications traffic of NATO 
members in ordor to ra&aaure (a) tha incidents of violations of NATO 
corammicaticna security regulations; and (b) the extant of potential 




SCOPE AND METHOD OF THE INVESTIGATION i 

2. Tfc:ia CoaaLttee was established at the 82nd meeting of USCIB 
on 13 February 1953 to examine the problem of conmunicaticne security 
violations by NATO ssKfeers. The Coonittee filed a report dated 
30 April 1953 uhich set forth certain findings pertaining to security 
violations detected in the available traffic and centered principally 
on During 

the period of this initial at udy , arrangements were made to hold a 
3RUSA conference on the entire problem of NATO casnuni cations 
security. With that fact in mind, USCIB decided at its 84 th meeting 
on 8 May 1953 that this Cessaittee should continue its investigation 
on broader lines which would include not only a consideration of 
security violations but also an effort to determine the extent of 
potential damage to US interests resulting from leakage of 
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communications security practices^ This report cr-*rs all phases 
of the expanded problem.. 



3o The original directive called for repretvoniatj ves of the 
Departments of State and Army to coc. ! 'dinate with tne iJiraitor,, USA 
In preparing a report., It soon bee&ue apparent th.vt the investigation 
would touch areas in which all member departments and agencies of 
USCI3 have an interesto Consequently* the Departments of Havy and 
Air Fores j, the Central Intelligence Agency and the Federal Bureau 
of Investigation were asked to participate in the survey and their 
representatives have joined in various phases of the investigation 
and the preparation of this reporto 

bo The results of this survey are presented in the four Tabs 
attached hersto 0 Tab A presents the investigation into security 
violations and is in substance the initial report presented to USCIB 



under date of 30 April 195 3 o Tab B is a statement of the situation 
as it pertains to military traffic? Tab C represents a substantive 




\ 





a direct product of the Committee ‘a investigation but la presented as • 
convenience to the members of the Board in their consideration of the 
entire problem,. 



6c Each phase of the Committee’s work la subject to particular 
limitations which are described in the relevant attachments to the 
report. However, certain general restrictions in coverage were 
necessary to make the Cownittoo’s work manageable and are applicable 
to all the attachments; as follow si 

(a) The traffic examined was limited to messages sent 
between 1 November 1952 and 1 May 1953c Although a few 
messages transmitted prior to 1 November 1952 are included in 
this report^ they are items which were brought to the attention 
of the Committee primarily as examples of the type of material 
desired and their inclusion here does not mean that the period 
prior to 1 November 1952 was examined thoroughly. 

In no phase of the Committee 6 s investigation can it be stated that 
all of the available traffic during this period has been examined r 
The Committee endeavored to cover all major circuits, and through 
this search and by checking the files of the departments and agencies 
represented on the Committee, it is estimated that an accurate total 
appraisal has been achieved. The inability to examine every message 
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means, of course. that same items have been overlooked.. However 0 
the Committee does not believe that the number or quality of such 
messages would be such as to alter the principal conclusions of 
this report^ 

7c The Committee's conclusions must be qualified by certain 
assumptions which were made in order to center the focus of attention 
on the content of the traffic and to avoid inquiries beyond the 
competence of the Committee 0 It was assumed that 
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On security violations > 




7o The proper US- UK Authorities on NATO should be f ull y 
informed of the security violations with respect to NATO matters 
d be urged to develop a program of strict observance of NATO 
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regulations,, Initial efforts along this 11ns should not involve 
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appraiae, especially in hindsight* The CoandLttee has made 
every effort to be accurate ea veil as objective in examining 
this traffic but the masher of atopies found in this survey 
cannot be presented as an absolute figure* Nevertheless, shea 
one takes into account the huge number of awes ages ewurinsd by 
all the evaluating agencies la the course of their nornal oper- 
ations during the test period chosen for this survey, and the 
intensive effort on the part of the representatives of these 
agencies nesting in eeondttee to identify examples of informa- 
tion leakage Injurious to 03 interests, it is evident that the 
leakage, insofar aa T^fTT^'I^T 111 concerned, is very snail. 

6. Despite the quantitative Insignificance of the fore- 
going examples, 1 



This su rvey has brought out a reasonably 
eonf orbing fact in the sense that fen damaging examples ware 
uncovered, but this oust be balanoad against the possibility 
that at any nowa nt critically damaging infomation could ap- 
pear In the sane type of traffic* The latter aspect of the 
situation is co vere d in the section laswdlately following. 



T 
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7« Ad effort to improve national cryptographic and com- 
munications practices could reduce appreciably the total caummi- 
cations security problem under consideration and should be made 
prior to any effort to improve systems or to encourage the use of 
more complicated cryptographic equipment » 

8 , A substantial Im pr ov e m ent in the general situation might 
result l’rcoi the Institution of a security demonstration among the 
NATO countries# 

Other conclusions: 



3# The evidence brought out in this investigation does not 
indicate that serious damage has ocoured during the period covered 
by this survey# However, such damage has occurred in the peat and 
may occur again in the future# 
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of the security violations with respect to NATO Batters for the 
purpose of developing s program of strict observance of the NATO 
eommmicatians security regulations. 

2. An effort should be undertaken jointly with the British 
to improve the national cryptographic and ccsmunioations practices 
of the NATO countries by a demonstration of proper techniques, ex- 
planation of I 



and other means short of direct 
at this time. Such demonstra- 



tions and explanations must be' considerably detailed even to a 
point that might be expected to permit reasonable suppositions as 



td 



Machinery should be established jointly with thel 




for the continuing examination of the traffic of NATO countries 
and for the analysis of their room mi cations practices in order 
to supplement this survey, to judge the effect of the efforts to 
improve their security and to provide a basis for future action. 
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SECURITY VIOLATIONS 



le Thia phase of the Committee's investigation of traffic was 
undertaken prior to and separately from the investigation covered by 
Tabs B and C and is limited to a consideration of security violations'. 
For the purpose of this report the Committee defined a security violation 
as any message violating NATO communications security regulations;, The 
definition was adopted because those regulations constitute the only 
standard agreed upon by the NATO countries? 



“C OSM IC o The word COSMIC has been designed as a security 
warning only 0 this designation shall* in addition to the 
appropriate security classification, be placed on all Joint 
and national papers tabled at meetings of any body or committee 
set up under the North Atlantic Treaty Organization which 
contain and reveal » 

(1) Strategic or operational military appreciations* 
plans or decisions? 

(2) Political-military appreciations, plans or decisions? 

(3) Economic planning based on strategic military plans 
and decisions which could lead to disclosure of euoh 
plans and decisions? 

(U) Classified information of one country taoied or 
circulated by another country* unless the ’owner’ 
country agrees otherwise? 



TAB A 
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w NATQ o Oh all other Joint or national documents tabled or 
circulated within the North Atlantic Treaty Organization the 
word B NATQ K shall appear, together with the appropriate 
security classification,. This "NATO" markings however, does 
not require the special handling or accounting provided for 
"COSMIC" documents, other than as warranted by the security 
classification# and no special screening (as required for 
"COSMIC" personnel) is necessary for access to NATO documentSo* 



3o The investigation of security violations was subject to the 
assumptions described in paragraph 7 nr the report aid to the time 
limits described in paragraph 6 It did not cover the traffic of 



but was concentrated on the 



' { came to the 

attention of the Committee, but the traffic of those countries was not 
examined in detail 0 

ho In examining traffic for security violations the Committee 
considered 119 individual messages which were submitted primarily by 

The Committee screened this list 



to eliminate messages which clearly did not constitute security violations,. 



So In the course of this phase of the investigation the Committee 
encountered oertain messages which contained information damaging to the 

- 2 =. 
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Uo Therefore* no categorical statement can be made to the effect 
that there has been or has not been any "leakage” to the USSR of 
information damaging to US interests^ 



TAB B 







compromise might be in;) tu'itme to US ir<t«resta 0 A message was considered 



«» 

to affeot US interests if it rotated to matters in which the US was taking 
action or to a policy which the US was supporting* A message was 
considered damaging if the USSR could use the information either tn a 
Song or short term basis to thwart or hamper action taken by the US ©r the 
policies supported by it* Messages containing information affecting US 
interests were not considered damaging if timely information were available 
to the USSR through open Bourses such as newspapers or public release of 
government information* 

2o The material studied during this phase of the investigation falls 
into the following categories* 
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of this report/ ware checked by the Coondttee under the terras 
of reference mentioned in Paragraph 1 above* 




3. On the basis of investigating the four categories noted 
in the paragraph immediately preceding, the Cconittee accepted the 
evaluations of the various specialist panels to the effect that 
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report to the BSC on 31 August 1948 end on 2 September the BSC 



Accepted the Majority view la U3CIB that these steps should not be 
taken o Secretary Marshall replied personally to Foreign Minister 
Bavin Informing him of this decision. 

2. A year later, la September and October of 1949, USCIB, noting 
on behalf of the OS Government, accepted a British proposal that a 
British cryptographic device (the Typex Mark II) be provided to the 
Western Union powers, and subsequently to all BATO gove wants, for 
the exclusive encipherment of METRIC and COSMIC teleconnunloations • 
This device was subsequently adopted by BATO for this purpose. 



3. During the foiloulag etnaaar of 1950 the British Ambassador In 
Washington raised with the Departaent of State the general problea 
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steps to this end without awaiting either the establishment of “secure 




ccamunications organisations and designed to assure adequate guarantees 
of security at each step of the approach. This Department of State 



proposal was considered by the Beard at its meeting of 9 March and 
was withdrawn by the State member in the face of a majority view 
that the Board should adhere to the more rigid polioy which it had 
already adopted. The specific proposals for the scope and agenda 
for the forthcoming conference were approved , however , and were for- 
warded to LSIB on 13 March 1951 (14/128). 

8. The BRUSA Conference was held in May 1951 and its Report (14/132 ) 
was submitted to DSC IB on 15 May. USCIB approved the Report at its 
meeting on 24 May and decided also to refer it to the NSC for approval 
and to perpetuate the US conference delegation as an Ad Hoc Committee 
of the Board to keep this problem under continuous review. LSIB 
notified us of its approval of the Report by letter of 7 June 1951 
(13/188). The Report was forwarded to the NSC on 8 June 1951 (14/137) 
and was approved by the Special Committee of the NSC and the President 
am 11 January 1952 (14A«9)« 



9. The principal results of this BRUSA Conference were! 

(a) The preparation of a specific cryptographic plan which 
could accomplish the desired improvement in tbs security 
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(d) The establishment of general security conditions or 

criteria which sust be met to the satisfaction of both 
LSIB and USCIB prior to taking action* 



It may be noted that the work of this Conference was based on a prior 
assumption that the need to take direct action to improve the security 
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eeoiirity should not ho tmde until the Report had boon approved by 



each of the participating countries and 



had taken definite 



action an the basis of t>ia Report. The Ad Hoc Cooaittee was ordered 
to study the specific plan proposed by the British. These views 
were communicated to LSIB in a letter of 24 January 1952 (14/196) o 
The Ad Hoc Conasitte® rendered its report on 13 February 1952 (14/200) 
in which it endorsed the reply which USC1B had made to LSIB and 
recommended further that no approach should be made until another 








10 * 



i 



p 






A HOB 

o 



the Department of State in vhich the Bri tish suggested that Secretary 
Acheaon might be prepared to endorse immediately direct action and 
that DSC IB night, therefore, reverse its deoision of the preceding 
January, In a message of 27 June 1952 Mr, /inaotresng adviced Mr. Joaea 
that the US position in this matter had not bean changed. 



14* The next and latest British effort to obtain our agreement that 



& 
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DSC IB h&e advised LSIfi that it has agreed to cuch & conference , nou 
scheduled to commence in Washington an 4 June 1959* 



15* In preparation for this conference U3CIB reconsidered the general 
problan of the insecurity of the ccraronlcationg of NATO countries at 
its meeting of 13 February 1953 and established a new Ad Hoc Ccsndtte© 
to review the risk to the security of DS classified information created 
by violations of NATO cosm^i cations security practices and by the 
insecurity of the national ooamunicationa of NATO countries » A report 
was submitted by this Ad Hoc Cccaitteo oo 4 Nay 1959 (29/51) and was 
discussed by the Board at its meeting of 8 May 1952 « This Report 
dealt principally with violations of NATO communications security 
practices* BSC IB (a) noted the initial report by the Ad Hoc Committee 
and decided that the Committee should continue its study of the 
additional phases of the problem as outlined by fith 

a view to submitting a report for the consideration of the Board 
at a special meeting to be held in advance of ths 4 June BRUSA Con- 
ference) (b) agreed to defer consideration of a presentation of this 
entire problem to NSC until the Ad Hoc Committee Report had been 
reviewed* 
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16 o the problem of risk to the security of the United States created 
by the coranunloatloaa wee first considered by 
USC IB in the summer of 1951 shortly after the BRUSA Conference on 

communications security. The matter was raised by th ^ fr tom- 
ber at the meeting of USC IB on 22 June 1951 In connection with several 




of the express request of the US originators of the information . 
U8CXB directed that the Ad Hoe Committee , composed of members of the 



American Delegation to the recent BRUSA Conference on 



O&tions security, study and evaluate the problem of 




omraunl- 



ommun l- 



oatlons security. 



17. The first Report of this Ad Boo Committee (23/18) was submitted 
to USC IB at its meeting on 13 July 1951 and was accepted. USC IB 
directed that the Committee continue its study with particular regard 



to the problem of correcting 



abuse of KATO communications 



security procedures. In this first Report the Ad Hoc Committee had 
oonoluded that* 




that on the whole, so far as HATO or US political and 
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economic policy was concerned} the information dis- 



closed through insecure 



communications was 



not highly detrimental to the security of the OS 
(b) The level of was so 



8 80 lOV 



oe to afford little likelihood that an improvement in 
their communications security would effectively prevent 
leakage of information affecting the security of the US, 
(e) There was no assurance that all available authorised 
means within the NATO organization have been applied 
toward the correction of abuse of NATO 

communications security procedures. 

(d) Direct action toward the improvement of over-all 

I : aexsunica t ions security was, therefore, not 

V, I 

justified at that time. 

i 

The Ad Hoc Ccunlttee had recommended that their study be continued 



and that no direct action yis -a -vls the 




contemplated 




until USC IB or the NSC had decided whether such action should be 



taken vis-a-vis 



18. The final Report of the Ad Hoc Committee (23/22) was submitted 
on 7 August 1951 and was considered by USC IB at its meeting an 
10 August. In this Report the Committee re-affirmed its previous 
recommendation that no direct action should be taken at that time 



beyond an effort to correct 



ibus© of NATO communications 



r«a4iu ALU 



rTst jfr , ■h i / ( l 
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security procedures . The Committee recommended both a plan for an 



immediate approach to the 



this end and several long- 



range proposals directed toward eventual over-all improvement of 
com unications security. 

(a) The plan far Im mediate action envisaged a unilateral 



US approach to the 




at the 



ambassadorial level wherein we would advise the 
| [ that we had been apprised of a 
violation of NATO communications security procedures 
and would request categorical assurance that they 
would correct this abuse. It was proposed alec that we 



would offer our assurances as to the security 



of the 



NATO crypto-ays tea (Type* Nark II) and oQsnunications 



procedures and that we would offer such technical 



assistance or advice as the 

to assure themselves along these lines. 



was to be based on the o an tent and handling of a 



desire 



This approach 




on 6 July 1951 j our possession of this Information 



being attributed to an agent report 




activity. DSC IB approved the recommendations of 



the Ad Hoc Committee and designated the 



aent and CIA to develop the particulars 



State Depart- 



of this approach. 



(b) USCIB has taken no action on the long-range proposals . 
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20. Between August and November of 1951 there were several exchanges 
between USCIB and LSIB in the course of obtainin g approval 



for this approach to the! 



The final DSC IB 



Ad Hoc Committee Report was forwarded to LSIB on 17 August , and the 
details of the proposed plan developed by State and CIA were ex- 
plained to Sir Edward Travis, and forwarded by him tc | | on 
l lovember. Meanwhile LSIB had considered the USCIB proposal and 
had advised USCIB, by a message of 5 November (23/28), that this 
pi ffn ms not acceptable to them. They felt that the approach was 
too risky and would not servo to accomplish the over-all improvement 

communications which they considered 



in the security of 



Imperative a At the urging of Sir Edward Travis IS IB reconsidered 
the detailed plan and, by a message of 8 November and a subsequent 
letter of 19 November (23/40), withdrew their objections on the 
understanding that (a) the approach would be addressed solely to 
correcting abuse of NATO ecomunicatlons security practices 
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and (b) would be followed by further consideration of the British 
suggestion that steps should be taken to improve over-all 
coamunloatloas security. By letter of 23 November (23/41) USCIB 
advised L£1B that the approach would be made shortly after 1 December. 
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0jf response and recommending that it would be best 

to consider the natter dosed until further instances of 
abuse of MATO ccnnunioatioas security procedures appeared* 
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through the provision of the combined cipher machine 
(GCM) & but stated that there were only 10 CCM 3 s which 
could be mad® available at that time and that it was 



not possible to anticipate when further equipment 
would be available to satisfy the entire 



requests 



The DIRAFSA stipulated that this equipment could b© made 
available only on a free loan or rental basis and that 
the 



[Government would have to agree to certain 



stipulations covering the physical protection and 
di sposition of it 0 
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thatj in reaching a decision in this case , it had been 
impelled by the "prolonged US^-UK discussions on this 
general problem in 'the past** to feel that "the importance 
to the US and UK of the security of the communications of 
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SECURITY VIOLATIONS 
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EXHIBIT 2 
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STATUS 07 MATO CRTPTQSX STEMS 



A 0 First level (high military and diplomatic)! 

In Typex with Simplex settings. 

2 0 Some one-time pads (approved by standing group). 



Date of approval! 20 July 1950 




NOTE} Non BRUSA countries mere furnished full 
technical details for making up their own national 
Simplex settings but no information is available 
as to whether they are doing so. 



Bo Second level (military only — high command to divisions)} 
lo COM. 

Date of approval! 10 November 



2. Hatex (back up to COM), 




September 1952c 



C. Third level (low echelon)} 
lo Natexo 

Date of approval* 25 July 1952 0 
No systems yet provided 0 

2. French modified M~209< 

Date of approval! Early 195~ 
Effective only byl |ao far. 
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